Re: BSD’s Cannot Ignore LLMs

[Edward Capriolo]

On Wed, Apr 8, 2026, 6:05 PM Raúl Cuza <rac at conpocococo.org> wrote:

> BSD projects cannot ignore LLMs because people using them are not ignoring
> BSDs.
>
> https://red.anthropic.com/2026/mythos-preview/ targets OpenBSD for the
> resale value of finding a vulnerability on “an operating system known
> primarily for security.”
>
> This article is effectively an advertisement for the unreleased next model
> from an AI company, but that doesn’t reduce the seriousness of the problem
> emerging for ALL maintainers of software, open or otherwise.
>
> The number of people who will be able to find vulnerabilities and build
> exploits is growing as LLMs progress. BSD project’s must adjust to the
> speed reacting to these findings will require.
>
> The number of people who can patch vulnerabilities will also grow, if
> projects can accept their patches.
>
> - r
>

Yet I have sent 4 patches to vllm, they have 5k open bugs now. Amd some
right to anthropic about there mcp server... big suprise not merged. They
joined the linux foundation and 9 months later somone tried to close my
stale pr.

>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20260408/b5d039cb/attachment.htm>